Explorer.exe csrcs.exe

[scib0rg]

I found this problem after my computer rebooted un-prompted and when it had finished loading the only way to navigate was using ctrl+alt+del, there was no desktop unless I ran explorer.exe. I found this problem was quite common so I read a few other threads about it which directed me to the regedit file that instead of Explorer.exe, was called Explorer.exe csrcs.exe. I am not sure how long this has been on my computer but my question is, firstly how do I remove it, and second what exactly can it do? I'm mostly worried about keylogging. Thx. Any help is appreciated.

 

[jmw3]

Welcome scib0rg

I will be helping you under the guidance of one of our expert coaches.
Please give me a little time to get back to you with instructions.

In the meantime please note the following:

• Any recommendations made are for your computer problems only and should NOT be used on any other computer.
• Please DO NOT run any scans/tools or other fixes unless I ask you to. This is very important for several reasons. Here are just two of them:
  1. The tools that we use are very powerful and can cause >>irreparable damage<< to your computer if not used correctly.
  2. Commercial scanners, for the most part can not completely remove some of the more "resistant" infections. This makes it much more difficult to get rid of completely.
• If you get stuck or are unsure of something please ask for a further explanation, do not guess.
• A lack of symptoms does not necessarily mean your computer is clean.
• Continue to respond to this thread until I give you the All Clean!

Please Note: My instructions to you are checked by an expert prior to posting. This may cause a small delay between posts.
Thanks

Download HijackThis
Download HiJackThis v2.0.2 from here
NOTE: Please uninstall the older version of HiJackThis first.

• Save HJTInstall.exe to your desktop
• Double click on the HJTInstall.exe icon on your desktop
• By default it will install to C:\Program Files\Trend Micro\HijackThis
• Click on Install
• It will create a HiJackThis icon on the desktop
• Once installed, it will launch HiJackThis
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad
• Click on Edit > Select All then click on Edit > Copy to copy the entire contents of the log
• Come back here to this thread and paste the log in your next reply

DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Create an Uninstall List

• Start HijackThis
• Click on the Config button
• Click on the Misc Tools button
• Click on the Open Uninstall Manager button
• Click on the Save list... button and specify where you would like to save this file
• When you press the Save button a notepad will open with the contents of that file
• Copy and paste the contents of that notepad here in your next reply